$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: zdiL+DqjbCDv1jGpdFA7CRU+4/G7Xzp/4gBeI2eJuUY= Subject key identifier: 82:41:38:34:CC:5E:16:51:08:89:6A:EC:6F:EE:4C:41:C9:2D:4D:4D Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 0326 Signing time: Wed 07 Oct 2026 01:10:16 +0000 Manifest this update: Wed 07 Oct 2026 01:10:16 +0000 Manifest next update: Wed 14 Oct 2026 01:10:16 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: mH6yY+C1690bq3GEDQx+HM48W7DVqAlf8G07/+vgKpQ=) 2: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: G3kaiurPfatRPZP7CqPIKbvlqsnpSEfzHgPDnICHiCk=) 3: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: zhPJuDjgckqRzGpF3JKmc3mqbX/Sm5NWxnx6UnLAwsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 01:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Oct 7 01:10:16 2026 GMT Not After : Oct 14 01:10:16 2026 GMT Subject: CN=6ac59bf8-32ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:8e:bc:c5:17:3c:c8:d7:49:3e:93:5d:ed: f1:8a:a6:dd:53:d8:ae:4c:9f:f4:f0:45:47:cb:cf: 29:d0:35:73:92:ba:7b:cf:61:74:7a:28:e0:76:39: b7:10:19:0a:f2:b9:55:b7:8f:ab:b7:8f:7a:2d:bf: f8:de:13:f3:01:f5:72:17:42:cb:b0:f8:b9:4f:47: 2b:2d:9a:0c:8a:b8:d1:cd:35:52:f1:12:82:8a:3b: 2a:b0:d3:20:bf:2c:74:40:16:0b:3b:54:da:23:52: 89:a7:69:d4:d4:7b:1f:22:8e:44:ef:b7:34:18:07: 21:f1:ec:ad:b3:0e:96:ae:d3:1c:24:56:bd:3d:52: 3b:e7:f7:1f:a7:9d:59:d0:0e:0f:11:51:89:cb:2f: 83:eb:86:ab:af:24:fb:a4:5f:19:51:04:b8:5e:e0: e4:22:2c:a1:96:06:a2:06:30:6a:56:69:ed:6a:2b: c6:63:52:14:43:0c:b7:e6:a4:21:38:26:a7:7e:aa: dc:7e:c7:0e:33:dc:b1:25:5a:2c:08:eb:b9:d1:ef: f3:47:35:fd:ce:2d:2b:c4:5f:9e:22:fb:4f:51:c3: 95:9f:d1:e4:d3:19:d5:38:79:cf:61:ee:2f:b7:69: c4:32:88:88:59:96:01:ef:fc:80:9e:8e:f9:1d:28: e7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:38:34:CC:5E:16:51:08:89:6A:EC:6F:EE:4C:41:C9:2D:4D:4D X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:19:cb:87:50:57:55:67:2c:c1:48:99:58:b9:0f:f2:46:e5: d2:ac:23:f3:a9:82:f4:04:dd:d3:fe:ee:97:2b:11:2f:81:83: 11:72:6a:c2:64:05:b7:0a:78:e5:14:79:58:db:e7:0a:a1:91: 66:1d:2a:0b:6d:37:a2:3f:49:ab:eb:16:1c:57:30:55:dc:83: 2f:b3:25:e2:6c:6f:e2:61:cb:e8:ac:e8:dc:b8:46:78:f7:61: db:cf:21:59:4a:1d:c8:56:02:01:5c:2f:af:0f:30:e1:76:d5: 93:47:76:8c:35:d9:60:a4:31:30:d9:bb:5e:f0:ac:19:0e:cb: 0e:ba:45:42:53:8a:5e:d9:ba:a5:77:60:57:d0:4e:f4:74:9e: 2b:73:ab:9b:c8:fe:67:b5:9d:28:ff:3b:b3:e0:3f:a6:cb:82: 62:da:eb:6c:72:2a:50:e8:89:62:af:94:e3:43:a1:37:ca:be: eb:0d:70:7c:29:b0:da:8b:1d:97:74:10:c1:e5:05:9a:d8:e4: aa:af:11:db:f5:f8:f6:4a:9e:9d:35:dc:a0:c5:e1:8a:e0:9b: 17:03:c7:69:da:8e:82:0c:eb:17:81:2a:23:bb:ab:be:b2:eb: 9f:15:d4:6f:c8:f1:91:0b:d4:e5:75:ba:6c:0d:61:94:bf:a7: 8e:c1:01:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjYxMDA3MDExMDE2WhcNMjYxMDE0MDExMDE2WjAYMRYwFAYD VQQDEw02YWM1OWJmOC0zMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoB6OvMUXPMjXST6TXe3xiqbdU9iuTJ/08EVHy88p0DVzkrp7z2F0eijgdjm3 EBkK8rlVt4+rt496Lb/43hPzAfVyF0LLsPi5T0crLZoMirjRzTVS8RKCijsqsNMg vyx0QBYLO1TaI1KJp2nU1HsfIo5E77c0GAch8eytsw6WrtMcJFa9PVI75/cfp51Z 0A4PEVGJyy+D64arryT7pF8ZUQS4XuDkIiyhlgaiBjBqVmntaivGY1IUQwy35qQh OCanfqrcfscOM9yxJVosCOu50e/zRzX9zi0rxF+eIvtPUcOVn9Hk0xnVOHnPYe4v t2nEMoiIWZYB7/yAno75HSjnFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJBODTM XhZRCIlq7G/uTEHJLU1NMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRnLh1BXVWcswUiZWLkP8kbl0qwj86mC9ATd0/7ulysRL4GDEXJqwmQFtwp4 5RR5WNvnCqGRZh0qC203oj9Jq+sWHFcwVdyDL7Ml4mxv4mHL6Kzo3LhGePdh288h WUodyFYCAVwvrw8w4XbVk0d2jDXZYKQxMNm7XvCsGQ7LDrpFQlOKXtm6pXdgV9BO 9HSeK3Orm8j+Z7WdKP87s+A/psuCYtrrbHIqUOiJYq+U40OhN8q+6w1wfCmw2osd l3QQweUFmtjkqq8R2/X49kqenTXcoMXhiuCbFwPHadqOggzrF4EqI7urvrLrnxXU b8jxkQvU5XW6bA1hlL+njsEBHA== -----END CERTIFICATE-----Generated at Wed Oct 7 05:59:18 2026 by rpki-client